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(54) Controlling apparatus behaviour upon addition/removal of a physical resource 

(57) A computer (10, 11, 12) is provided with a 
physically-removable resource in the form of a smart- 
card (20) including user logon information (for local 
and/or remote resources). Upon at least the removal of 
the smartcard (20), different behaviours are produced 
depending on whether a predetermined keyboard key, 
such as the ALT key, is depressed. Thus, assuming that 
the smartcard (20) has been used for logging on, then 
upon removal of the smartcard if the ALT key is not 
depressed, a logoff procedure is effected whereas if the 
ALT key is depressed at the time the smartcard (20) is 
removed, an alternative behaviour is effected such as 
the display of a user option menu. This approach of 
causing the behaviour of the computer to vary upon 
resource insertion/removal in dependence on whether 
there is a current sustained operation of an input device, 
can also be applied to other types of removable 
resources and input devices. 
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Description 

Field of the Invention 

The present invention relates to controlling the . 5 
behaviour of electronic apparatus upon addi- 
tion/removal of a physical resource; in particular, but not 
exclusively, the present invention relates to controlling 
the behaviour of a computer upon insertion/removal of 
an integrated circuit card (often called a "smartcard") 10 
into/from a smartcard reader associated with the com- 
puter. 

Background of the Invention 

15 

Smartcards have a variety of uses amongst the 
most important of which is as a secure data-storage unit 
for storing critical information such as passwords and - 
electronic funds information. Smartcards may also be 
used to provide specific functionality (such as encryp- 20 
tion/decryption) under password control. 

It is known to provide computers with smartcard 
interface units (often called smartcard readers though, 
in fact, data is frequently both read from, and passed to, 
the card). Such smartcard interface units have tradition- 25 
ally been provided as separate peripherals, interfacing 
with the computer through a dedicated port (for exam- 
ple, a RS232 serial port or more recently with the 
advent of the Universal Serial Bus for lew speed periph- 
eral connection, through a USB port). For user conven- 30 
ience, rather than providing the smartcard interface unit 
as a separate peripheral, it is also known to incorporate 
a smartcard interface into the keyboard unit of the com- 
puter. 

In a typical computer-related smartcard application, 35 
encryption keys for electronic commerce transactions 
are stored in the smartcard ad these keys must be read 
and used by the computer to enable a transaction with a 
remote third party via a computer network. The storage 
of passwords for accessing network resources is 40 
another common application (controlled remote logon) 
and, indeed, use of the computer itself may require the 
presense of a smartcard with the right passwords (con- 
trolled local logon) The insertion/removal of a smartcard 
into/from an active smartcard interface unit will gener- 45 
ally be detected but will frequently not affect the current 
operation of the associated computer (unless, of 
course, the smartcard is removed in the course of an 
operation in which it is involved in which event, the com- 
puter will take appropriate steps to gracefully terminate so 
the transaction so far as possible). However, the inser- 
tion/removal of a smartcard may be specifically used to 
trigger a particular behaviour; thus insertion of a smart- 
card may be used to trigger a logon procedure using 
information contained in the smartcard whilst card 55 
removal may be used to trigger a log off procedure. 
Such triggered behaviour is generally unmodif iable by a 
user. Whilst this inflexibility is usually justified on 



grounds of security, in reality it may not be necessary to 
restrict the computer's behaviour so rigidly - there may, 
indeed, be more than one appropraite behaviour upon 
smartcard insertion/removal. 

One way of providing flexibility would be to have a 
setup option giving the user the choice of which of sev- 
eral behaviours would be exhibited by the computer 
upon card insertion/removal, each possible behaviour 
being acceptable from a security standpoint where this 
is a concern. Such a arrangement would, however, be 
rather cumbersome in practice. An alternative would be 
to always have smartcard insertion/removal bring up a 
menu of permitted options; however, this can be annoy- 
ing where one behaviour predominates so that most of 
the time the same menu option will be selected. 

It is a object of the present invention to provide a 
flexible way of controlling the behaviour exhibited by a 
computer upon insertion/removal of a smartcard or, 
indeed, any other physically removable resource. 

Summary of the Invention 

According to the present invention, there is pro- 
vided electronic apparatus comprising: 

- a user input device by which a user can generate 
\ a predetermined sustained input to the apparatus; 

- interface means for interfacing with a physically- 
removable resource that can be moved into and out 

- of working relation with said interface means; 

- event-indication means for generating an event 
\ indication in response to.at least one of placement 

of said resource into said working relation with the 
interface means and the removal said resource out 
of said working relation; and 
-- control means responsive to each of at least cer- 
tain of said event indications to produce different 
behaviours of the apparatus in dependence on 
whether at the time of occurrence of the event indi- 
cation concerned there is a substantially-concur- 
rent said predetermined sustained input from the 
input device. 

With this arrangement, alternative behaviours can 
be chosen by a user at the time of instigating a trigger- 
ing event. Of course, it is already well known to vary the 
significance of a computer mouse operation by use of 
the SHIFT or CTRL keyboard keys. However, this use of 
keyboard keys to modify the significance of another 
operation has not been previously adopted in relation to 
removable resources because it is not intuitive to do so 
- the insertion/removal of such a resource is primarily 
thought of as a discrete mechanical act rather than as a 
modifiable control input. 

Typically the electronic apparatus of the invention 
will be a computer in which case the input device may, 
for example, be a keyboard, mouse, graphics pad, 
touchscreen, or voice input device, the said predeter- 
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mined sustained input being a corresponding input 
operation (such as key press in the case of the key- 
board or mouse). As regards the physically removable 
resource, this may be a smartcard, a PCMCIA module, 
a floppy disc, a removable hard disc, or any other 
removable device including devices interworking with 
the apparatus through infrared or similar non-tangible 
links. 

The different behaviours produced by the control 
means may vary widely but typically may include log 
on/off procedures, apparatus locking/unlocking, and 
user option menu display. One of the behaviours may 
also be a "do nothing" behaviour. 

In a preferred embodiment, the input device is a 
keyboard and the physically-removable resource a 
smartcard including user logo information (for local 
and/or remote resources). Upon at least removal of the 
smartcard, different behaviours are produced depend- 
ing on whether a predetermined keyboard key, such as 
the ALT key. is depressed. Thus, assuming that the 
smartcard has been used for logging on, then upon 
removal of the smartcard if the ALT key is not 
depressed, a logoff procedure is effected whereas if the 
ALT key is depressed at the time the smartcard is 
removed, an alternative behaviour is effected such as 
the display of a user option menu (for example, the 
Security Menu where Microsoft's Windows NT (Trade- < 
mark) operating system is being employed). 
< More than one alternative behaviour can be made 
available by providing for the control means to recog- 
nise different sustained inputs (such as pressing the 
. ALT or pressing the CTRL key of a keyboard). 

Brief Description of the Drawings 

Embodiments of the invention will how be 
described, by way of non-limiting example, with refer- 
ence to the accompanying diagrammatic drawings, in 
which: 
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Figure 1 is a diagrammatic representation of a first , 
computer embodying the invention; and 

Figure 2 is a diagrammatic represention of a sec- 
ond computer embodying the invention. 



Best Mode of Carrying O ut the Invention 

Figure 1 shows in highly schematic form a compu- 
ter comprising a processor box 10, a keyboard unit 11 
and monitor 12. A processor subsystem 13 of the proc- • 
essor box 10 interfaces with the keyboard unit 11 
through a hardware interface 1 4 and with the monitor 1 2 
through a hardware interface 15. In standard manner, 
the processor subsystem 13 runs various programs 
including operating system elements and application 
programs; the functional program elements of relevance 
to the present embodiment of the invention are depicted 
in Figure 1 by rounded boxes within the boundary of the 
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50 



55 



processor subsystem 13. 

The keyboard unit 11 comprises not only a key 
matrix 1 7 (with ALT and CTRL keys) but also a smart- 
card interface unit 18. In the present case, the unit 18 is 
provided to enable secure logon/ logoff, essential user 
in ID password information being held on a smartcard 
20. Both the key matrix 17 and smartcard unit 18 are 
controlled by a keyboard controller 19 that serves to 
interface each of these components with the processor 
subsystem. 

The smartcard interface unit 18 includes a pres- 
ence detector (not shown) for providing a presence sig- 
nal over line 21 to the controller 19 to indicate whether 
or not smartcard 20 is present in the unit 1 8 in a working 
position. In this working position the smartcard is oper- 
atively connected to control and data lines 22 through 
which the smartcard can communicate with the control- 
ler 19. The controller 19 is responsive to the smartcard 
presence signal on line 21 to send to the processor sub- 
system 13 a smartcard insertion signal upon insertion of 
smartcard 20 into unit 1 8, and a smartcard removal sig- 
nal upon removal of the smartcard 20. These insertion 
and removal signals are multiplexed with other signals 
exchanged between the controller 19 and processor 
subsystem 13. These other signals include not only 
smartcard control and data signals for exchange with 
the smartcard itself, but also key press and key release* 
signals that indicate to the subsystem 13 when a key of 
the key matrix 17 is depressed or released, the identity 
of this key being indicated by a corresponding keycode. 

In the processor subsystem 13, interfacing with the 
keyboard unit 19 is controlled through a keyboard & 
smartcard driver 25. Amongst other tasks, this driver 19 
generates event messages in response to the signals it 
receives from the controller 19. The event messages 
are sent to appropriate event handlers; in the present 
case, only the smartcard event handler 30 is shown and 
indeed, only the part of this handler 30 relevant to the 
present invention is illustrated and described. 

When driver 25 receives a key press or key release 
signal from the controller 19, H generates a correspond- 
ing key press or key release event message 27 and 
transmits it to a keyboard event handler (not shown). In 
addition, in accordance with the present embodiment of 
the invention, the driver 25 checks to see if the key 
press/release signal relates to particular keys, in this 
case the ALT and CTRL keys; if the key press/release 
signal does relate to either of these keys, the driver 25 
updates a corresponding key state indicator for the key 
concerned, these key state indicators being held mem- 
ory 26. 

When driver 25 receives a smartcard insertion or 
removal signal from the controller 19, it generates a 
smartcard insertion/removal event message 28 which it 
transmits to the smartcard event handler 30. Each such 
event message comprises a first parameter indicating 
whether the event is an insertion event or a removal 
event, and a second parameter indicating whether or 
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not the ALT or CTRL is currently pressed as determined 
from the key state information held in memory 26. 

The smartcard event handler 30 is responsive to 
the insertion/removal event messages 28 to produce 
appropriate behaviour; by passing the handler key state 
information in respect of the ALT and CTRL keys, it is 
possible to arrange for the handler 30 to produce differ- 
ent behaviour in dependence on the state of the ALT 
and CTRL keys. More particularly, upon the handler 30 
receiving a insertion/removal event message, it initially 
determines from the said first parameter of the mes- 
sage whether the event is an insertion or removal event 
(step 31). 

For an insertion event, the handler 30 next deter- 
mines (step 32) whether either of the predetermined 
keys of interest (in this case, the ALT and CTRL keys) is 
currently pressed. If neither of the ALT and CTRL keys 
are pressed, then the handler 30 initiates an insertion 
default behaviour 35 which in the present case is a 
logon procedure involving the reading of user ID and 
password information from the smartcard. If, however, 
the ALT key is indicated as being pressed, then an 
insertion alternative behaviour 36 is initiated such as 
the display of certain non-confidential information held 
on the smartcard (for example, via a menu of public 
fields on the smartcard). 

In the present example, for an insertion event the 
state of the CTRL is ignored, depression of this key dur- 
ing card insertion having no effect on the behaviour ini- 
tiated by the handler 30. However, it would of course be 
possible for a second alternative behaviour to be initi- 
ated if the CTRL was depressed rather than the ALT 
key. If both keys were pressed, then either one could be 
given priority (for example, the behaviour associated 
with ALT key depression could be initiated) or an alter- 
native behaviour specific to this dual key depression 
could be initiated. 

With regard to smartcard removal events, if neither 
of the ALT key and CTRL keys are pressed, then the 
handler initiates a removal default behaviour 37 which in 
the present case is a logoff procedure. If, however, the 
ALT key is indicated as being pressed a first alternative 
behaviour 38 is initiated whereas if the CTRL key is indi- 
cated as pressed, a second alternative behaviour 39 is 
initiated. The first alternative behaviour is in the present 
case the display of a user option menu followed by exe- 
cution of the option selected by the user; more particu- 
larly, where the operating system being used is the 
Microsoft Windows NT (Trademark) operating system, 
the user option menu displayed can be an enhanced 
security menu giving the user the choice of logoff, shut- 
down, restart, lock the computer, or ignore event (this 
latter option permits a different card, such as a credit 
card, to be inserted during a session). The second alter- 
native behaviour is, in the present case, the locking of 
the computer. If both the ALT and CTRL are pressed, 
then one of the first and second alternative behaviours 
is given priority. 



From the foregoing, it will be appreciated that the 
-Figure 1 embodiment provides substantial flexibility for 
the user to choose a desired behaviour upon inser- 
tion/removal of a smartcard. The same general 

5 approach can be used in other cases and Figure 2 illus- 
trates an embodiment in which the physically-removable 
item is a PCMCIA module 46 rather than a smartcard, 
and the input device used to command an alternative 
behaviour is a mouse 40 (in particular, the right mouse 

10 key) rather than a keyboard unit. 

More particularly, in the Figure 2 embodiment a 
PCMCIA unit 43 is provided for receiving a PCMCIA 
module 46. the unit 43 being capable of detecting inser- 
tion and removal of module 46. The unit interfaces 43 

is via hardware interface 44 with a PCMCIA driver 45 that 
generates, inter alia, module insertion/removal event 
messages 48 that are sent to a PCMCIA event handler 
50. These event messages 48 indicate the event type 
(insertion or removal). The Figure 2 computer also com- 

20 prises a mouse 40 that interfaces via hardware interface 
41 with a mouse driver 42. The mouse driver 42 is 
responsive to operation of the right mouse button 49 to 
generate mouse right-key press/release event mes- 
sages 47 that are sent both to a mouse event handler 

25 (not shown) and to the PCMCIA event handler 50. The 
handler 50 uses these event messages 47 to maintain 
an indication in memory 51 of the current state 
(pressed/released) of the mouse right key 49. 

Upon the handler 50 receiving an insertion/release 

30 event message 48, it first checks whether it relates to an 
insertion or a removal event (step 52). In the present 
example, if the event is an insertion event then the same 
default behaviour 57 is always executed regardless of 
the state of the right mouse key. If, however, the event is 

35 a removal event, then the handler 50 next checks (step 
53) by reference to memory 51 whether or not the right 
mouse key is currently depressed - if it is not then a 
default behaviour 58 is initiated whereas if the right 
mouse key is depressed, an alternative behaviour 59 is 

40 initiated. 

It may be noted that in the Figure 2 embodiment 
because the removable resource (module 46) and input 
device (mouse 40) interface with the processor subsys- 
tem through different channels, the association of inser- 

45 tion/removal event information with key press 
information has to be done at a higher level (handler 50) 
than in the Figure 1 embodiment where the driver 25 
performed this association. 

Many variants are possible to the above described 

so embodiments of the invention. For example, the remov- 
able resource can be instead of a smartcard or PCMCIA 
module, a diskette, a removable hard disc, a network 
connection, a subsidiary computing device, or indeed 
any resource whose operative connection/disconnec- 

55 tion with the computer can he detected ad used to trig- 
ger a behaviour. It may be noted that the working 
interconnection between the removable resource and 
the computer does not need to be a pluggable connec- 
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3. Apparatus according to claim 1 , wherein said input 
device is a mouse and said predetermined sus- 
tained input is the sustained operation of a prede- 
termined key of said mouse. 

5 

4. Apparatus according to claim 1 , wherein said phys- 
ically removable resource is a smartcard and said 
interface means is a smartcard interlace unit. 

10 5. Apparatus according to claim 1 , wherein said phys- 
ically removable resource is a PCMCIA module and 
said interface means is a PCMCIA interface unit. 

6. Apparatus according to claim 1 , wherein said phys- 
is icalty removable resource and said interface means 
interwork via an infrared link. 



tion and it could, for example, be an infrared connection. 

Where the input device used to provide a sustained 
user input is a keyboard, then placing of one of the sta- 
tus lock keys (eg CAPS LOCK) in its locked state could 
he used to indicate a sustained user input. However, 
this is not preferred as a user is likely not to check the 
status of such a key in cases where the user does not 
wish to command a behaviour different from the default 
one. 

Further as regards the input device used to com- 
mand an alternative behaviour, instead of a keyboard or 
mouse, this could be a graphics tablet, touchscreen, 
foot pedal, a two-state switch, a voice response unit, an 
infra-red controller or any other device capable of pro- 
viding a sustained user input. 

The behaviours produced can be any behaviour 
desired in the circumstances, including a "do nothing" 
behaviour. 

Not all detected events that concern placing the 
resource into/out of working relation with the computer 
need give rise to a behaviour; for example, all insertion 
events of a smartcard may be ignored or some other 
condition may need to be fulfilled before events are 
taken notice of. Information held by the resource itself 
could be used to determine whether a behaviour was to 
be triggered upon occurence of an event. 

The present invention may be applied to electronic 
apparatus in general and is not restricted to use with 
computers. 

Claims 

1 . Electronic apparatus comprising: 

- a user input device by which a user can gen- 
erate a predetermined sustained input to said 
apparatus; 

- interface means for interfacing with a physi- 
cally-removable resource that can be moved 
into and out of working relation with said inter- 
face means; 

- event-indication means for generating an 
event indication in response to removal of said 
resource out of said working relation with said 
interface and 

~ control means responsive to each of at least 
certain of said event indications to produce dif- 
ferent behaviours of said apparatus in depend- 
ence on whether at the time of occurrence of 
the event indication concerned there is a sub- 
stantially-concurrent said predetermined sus- 
tained input from the input device. 

2. Apparatus according to claim 1. wherein said input 
device is a keyboard and said predetermined sus- 
tained input is the sustained operation of a prede- 
termined key of said keyboard. 



7. Apparatus according to claim 1 , wherein one of said 
different behaviours is a user session log-off proce- 
dure. 

8. Apparatus according to claim 1 , wherein one of said 
different behaviours is a "do nothing" behaviour. 

9. Apparatus according to claim 1 , wherein said appa- 
ratus includes display means, one of said different 
behaviours involving displaying a menu of options 
to said user and carrying out the said option subse- 
quently chosen by the user. 

10. Apparatus according to claim 1, wherein said input 
device is operable to produce a plurality of different 
said predetermined sustained inputs, said control 
means being operative to distinguish between said 
different predetermined sustained inputs to provide 
corresponding different behaviours. 
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